Documentation ¶
Index ¶
- func APIGroupMatches(limit admissioncontrollerconfig.ResourceLimit, group string) bool
- func ResourceMatches(limit admissioncontrollerconfig.ResourceLimit, resource string) bool
- func ServiceAccountMatches(subject rbacv1.Subject, userInfo authenticationv1.UserInfo) bool
- func UserGroupMatches(subject rbacv1.Subject, userInfo authenticationv1.UserInfo) bool
- func UserMatches(subject rbacv1.Subject, userInfo authenticationv1.UserInfo) bool
- func VersionMatches(limit admissioncontrollerconfig.ResourceLimit, version string) bool
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func APIGroupMatches ¶
func APIGroupMatches(limit admissioncontrollerconfig.ResourceLimit, group string) bool
APIGroupMatches returns `true` if the given group has a match in the given limit.
func ResourceMatches ¶
func ResourceMatches(limit admissioncontrollerconfig.ResourceLimit, resource string) bool
ResourceMatches returns `true` if the given resource has a match in the given limit.
func ServiceAccountMatches ¶
func ServiceAccountMatches(subject rbacv1.Subject, userInfo authenticationv1.UserInfo) bool
ServiceAccountMatches returns `true` if the given service account in the subject has a match in the given userConfig. Supports `admissioncontrollerconfig.WildcardAll` in subject name.
func UserGroupMatches ¶
func UserGroupMatches(subject rbacv1.Subject, userInfo authenticationv1.UserInfo) bool
UserGroupMatches returns `true` if the given group in the subject has a match in the given userConfig. Always returns true if `admissioncontrollerconfig.WildcardAll` is used in subject.
func UserMatches ¶
func UserMatches(subject rbacv1.Subject, userInfo authenticationv1.UserInfo) bool
UserMatches returns `true` if the given user in the subject has a match in the given userConfig.
func VersionMatches ¶
func VersionMatches(limit admissioncontrollerconfig.ResourceLimit, version string) bool
VersionMatches returns `true` if the given version has a match in the given limit.
Types ¶
This section is empty.